-
-
Notifications
You must be signed in to change notification settings - Fork 15
Home
Welcome to the Digital Bone Box wiki!
This wiki serves as the central knowledge base for the Digital Bone Box project. It contains high-level strategic documents, architectural diagrams, and technical guides for scripts and testing.
Please be aware that this wiki is new and documentation files are still being migrated over. Some information may be missing or lacking context.
Focus: System architecture, data flow, and database design.
Focus: Defining common terminology specific to this repository.
Focus: Security, Risk Assessment, and Mitigation.
This document provides a comprehensive security analysis of the application. It details:
- The "GitHub-as-a-Database" Risk Profile: Analysis of our dependency on the GitHub Raw API.
-
Critical Vulnerabilities: Risks associated with the unprotected
databranch. - Mitigation Strategy: The roadmap for securing the supply chain.
Important
Much of the threat model document is outdated and describes the old model for the app, which we are moving away from, which involves storing the app data in a separate branch in the repository and fetching it from GitHub while running the app. The new model involves storing the data directly in the server. The threat model page of this wiki will be updated soon with more up-to-date information.
Focus: Documenting the Python scripts we use to automate extraction of data from PowerPoint files for use in our app.
Please refer to the individual files within this folder for specific instructions.
Please review these documents before proposing significant changes to the backend architecture or data fetching logic. Preserving the security boundaries and caching strategy outlined here is critical for the application's stability.